SOLVED Networking Issue with IOCage

[Surpher]

Hi All,

I'm just starting to experiment with FreeNAS and jails. I'm on 11-1 and am experimenting using a VirtualBox setup (might be relevant to the issue). I'm trying to get networking working within an iocage created jail.

I created the jail at the CLI via this command:


iocage create -n "vpn" -r 11.1-RELEASE ip4_addr="vnet0|192.168.1.176/24" defaultrouter="192.168.1.1" vnet="on" allow_raw_sockets="1" boot="on"



I consoled into the jail and the internet was unreachable AFAIK:

root@vpn:~ # ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
--- 8.8.8.8 ping statistics ---
7 packets transmitted, 0 packets received, 100.0% packet loss


I tried setting up the tunables mentioned in this post . I rebooted and that worked as I would expect (setup the bridge and my em0 interface was added to the bridge):

host ifconfig:

Code:

em0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
		options=98<VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
		ether 08:00:27:8d:16:45
		hwaddr 08:00:27:8d:16:45
		inet 192.168.1.143 netmask 0xffffff00 broadcast 192.168.1.255
		nd6 options=9<PERFORMNUD,IFDISABLED>
		media: Ethernet autoselect (1000baseT <full-duplex>)
		status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
		options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
		inet6 ::1 prefixlen 128
		inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2
		inet 127.0.0.1 netmask 0xff000000
		nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
		groups: lo
bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
		ether 02:92:c1:4e:07:00
		nd6 options=9<PERFORMNUD,IFDISABLED>
		groups: bridge
		id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
		maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
		root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
		member: vnet0:4 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
				ifmaxaddr 0 port 4 priority 128 path cost 2000
		member: em0 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
				ifmaxaddr 0 port 1 priority 128 path cost 20000
vnet0:4: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
		description: associated with jail: vpn
		options=8<VLAN_MTU>
		ether 02:ff:60:49:46:d1
		hwaddr 02:46:50:00:04:0a
		nd6 options=9<PERFORMNUD,IFDISABLED>
		media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
		status: active
		groups: epair

ifconfig from the jail:

Code:

root@vpn:~ # ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
		options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
		inet6 ::1 prefixlen 128
		inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
		inet 127.0.0.1 netmask 0xff000000
		nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
		groups: lo
vnet0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
		options=8<VLAN_MTU>
		ether 02:ff:60:49:46:d2
		hwaddr 02:46:a0:00:05:0b
		inet 192.168.1.176 netmask 0xffffff00 broadcast 192.168.1.255
		nd6 options=1<PERFORMNUD>
		media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
		status: active
		groups: epair

I can ping the host (192.168.1.143) but not other computers on the network or internet ips.


Any help would be appreciated, thanks!

 

[m0nkey_]

You need to enable promiscuous mode in VirtualBox.

https://www.virtualbox.org/manual/ch06.html

 

[Surpher]

Thanks! That got me on the right track. I actually had promiscuous mode on. The problem was that I was bridging to an Airport connection, the linked documentation points out that promiscuous often doesn't work with a Wifi connection. Switch to wired sorted it out for me.